This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa
File:                     3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa (raw, json)
Hash identifier:          n28ui5ABGLomFiZUg4CSkTtFJ/h9N3JV6GJoem7o48Q=
Subject key identifier:   DC:C8:47:08:56:F3:AE:A4:2B:21:29:DC:B2:83:78:50:71:7B:24:52
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       163268BD9ABBB9FDDD84687F5C765699326E0DD8
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa
Signing time:             Tue 06 Jan 2026 19:34:18 +0000
ROA not before:           Tue 06 Jan 2026 19:29:18 +0000
ROA not after:            Tue 05 Jan 2027 19:34:18 +0000
asID:                     270081
IP address blocks:        179.49.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 01:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:68:bd:9a:bb:b9:fd:dd:84:68:7f:5c:76:56:99:32:6e:0d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Jan  6 19:29:18 2026 GMT
            Not After : Jan  5 19:34:18 2027 GMT
        Subject: CN=DCC8470856F3AEA42B2129DCB2837850717B2452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:e2:70:02:de:60:09:80:b4:7f:9c:28:70:
                    29:38:47:e8:62:a3:46:e8:f3:cd:68:21:d3:dc:ba:
                    b5:a1:99:8e:9b:61:cd:aa:d0:bd:36:b8:54:74:2c:
                    d9:19:7b:1e:0b:73:ae:6b:23:09:0d:ef:6d:63:90:
                    d4:c7:39:f7:c8:4b:b3:4f:11:dc:59:0b:67:e0:2a:
                    36:1b:71:3f:23:98:72:71:5b:b6:14:29:1b:f2:90:
                    d6:d9:8e:e3:e3:94:d4:82:f6:a9:11:ed:81:10:6e:
                    61:4c:e3:23:05:7d:3a:fe:c2:a5:16:7a:d0:ac:f3:
                    f9:1f:9d:e6:17:36:5c:83:93:67:25:bc:84:0b:38:
                    1f:a8:73:e6:52:34:cc:46:74:48:43:79:54:be:d1:
                    d2:e7:65:6a:c1:46:de:ee:da:60:02:ef:04:c4:1e:
                    d4:13:98:b2:7d:13:b1:48:59:63:2c:bc:27:9c:9a:
                    da:36:b7:4e:9f:6d:ca:c7:38:a4:85:a3:e1:f9:75:
                    d8:e2:aa:8e:d7:29:62:b0:7f:12:75:1f:02:8b:33:
                    20:61:e2:67:dc:d8:e2:20:46:10:40:3a:b0:c7:8f:
                    62:54:5e:a9:24:e7:f5:06:12:fd:88:d4:4b:40:e4:
                    82:90:20:ba:c3:e6:dd:ec:0a:46:17:43:3a:cb:3c:
                    6c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:47:08:56:F3:AE:A4:2B:21:29:DC:B2:83:78:50:71:7B:24:52
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135382e302f32332d3233203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:03:25:ee:e9:ac:8a:3d:a4:09:68:de:1f:f6:49:2b:e9:
         b7:9f:8a:af:ff:c7:ff:fd:fc:4e:ad:62:ca:59:7c:d9:ad:fb:
         22:d8:f4:cd:75:69:d9:ce:51:12:ca:89:ff:03:26:b2:b9:fd:
         fa:93:c4:e8:32:17:4a:82:c5:12:2e:81:91:67:ed:20:ea:19:
         43:9c:a6:0c:b8:10:1f:8d:4d:13:06:4f:21:e6:2a:ee:68:a3:
         6c:08:42:8c:95:f4:c0:1c:36:b3:46:e2:21:bc:98:95:41:d0:
         bc:82:3c:82:f2:0d:65:5b:90:23:b5:6c:97:e6:fb:f6:f7:20:
         00:6c:28:0e:a8:de:5c:cb:14:87:4b:16:d0:3a:35:7a:ac:ec:
         e8:fb:ab:44:03:af:7b:ed:8c:8d:24:7a:95:9e:d0:2a:77:7a:
         38:b8:cc:21:c1:e2:6c:7b:29:31:dc:2f:87:39:43:4f:b7:d5:
         e6:53:b9:90:15:3a:d2:61:3f:c5:f7:4e:8f:18:0b:67:17:af:
         f9:0d:6e:89:6e:97:5a:31:c2:07:42:34:c3:b3:86:c3:dc:47:
         3a:87:d2:e5:3e:70:d4:a3:1b:da:31:c7:b7:cd:6b:3c:da:05:
         fb:2d:f1:88:90:80:03:3d:07:2f:44:3b:62:91:1c:97:df:42:
         91:d9:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 23:37:41 2026 by rpki-client